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Abstract 

A principled procedure to infer a hierarchy of sta- 
tistical distributions possessing ill-conditioned eigenstruc- 
tures, from incomplete constraints, is presented. The in- 
ference process of the pdf's employs the Fisher informa- 
tion as the measure of uncertainty, and, utilizes a semi- 
supervised learning paradigm based on a measurement- 
response model. The principle underlying the learning 
paradigm involves providing a quantum mechanical conno- 
tation to statistical processes. The inferred pdf's constitute 
a statistical host that facilitates the encryption/decryption 
of covert information (code). A systematic strategy to en- 
crypt/decrypt code via unitary projections into the null 
spaces of the ill-conditioned eigenstructures, is presented. 
Numerical simulations exemplify the efficacy of the model. 



1. Introduction 

This paper accomplishes a two-fold objective. First, 
a systematic methodology to infer from incomplete con- 
straints, a hierarchy of statistical distributions correspond- 
ing to the multiple energy states of a time independent 
Schrodinger-like equation (TIS-1E), is presented. By def- 
inition, the case of incomplete constraints corresponds to 
scenarios where the number of constraints (physical ob- 
servables) is less than the dimension of the distribution. 
The inference procedure employs a semi-supervised learn- 
ing paradigm, based on a measurement-response model that 
utilizes the Fisher information (FI) as the measure of uncer- 
tainty. 

The time independent Schrodinger equation (TISE) is a 
fundamental equation of physics, that describes the behav- 
ior of a particle in the presence of an external potential [1] 
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Here, tp (x) is the wave function, E is the total energy 
eigenvalue, V(x) is the external potential, and, H® M is the 
TISE Hamiltonian. The constants fi and m are the Planck 
constant and the particle mass, respectively. In time in- 
dependent scenarios, Lagrangians containing the FI as the 
measure of uncertainty, yield on variational extremization 
an equation similar to the TISE, i.e. the TIS-1E [2] Q. The 
TIS-IE provides a quantum mechanical connotation to a sta- 
tistical process. 

Next, a self-consistent strategy to project covert infor- 
mation into the null spaces of ill-conditioned eigenstruc- 
tures possessed by the inferred host statistical distributions 
corresponding to the multiple energy states of the TIS-IE, is 
described. The strategy of unitary projection of covert infor- 
mation into the null spaces of the ill conditioned eigenstruc- 
tures of a hierarchy of statistical distributions, has been re- 
cently studied for host probability density functions (pdfs, 
hereafter) inferred using the maximum entropy (MaxEnt) 
principle [3]. 

The selective projection of covert information into a hi- 
erarchy of statistical distributions implies that the dimen- 
sion of the covert information is greater than that of any 
single host distribution. This selective projection endows 
the cod^l with multiple layers of security, without alter- 
ing the host statistical distributions. The present paper ac- 
complishes the task of achieving both symmetric and asym- 
metric cryptography [4] via a judicious amalgamation of 
statistical inference using an information theoretic semi- 
supervised learning paradigm, quantum mechanics, and, the 
theory of unitary projections. 

In summary, the semi-supervised learning paradigm 
is utilized to infer the statistical hosts possessing ill- 
conditioned eigenstructures. The code is then projected into 
the null spaces of these ill-conditioned eigenstructures. An- 
other example of the use of learning theory in cryptosys- 
tems, albeit within a different context, is described in [5]. 



'This property is the reason d'etre for the phrase "Fisher-Schrodinger 
model" 

2 The terms covert information and code are used interchangeably. 



1.1 The TIS-1E 



(MFI) principle [7] 



Consider a measured random variable y = (yi, J/at), 
parameterized by 9 = 6^f) (the "true" value). A 

fluctuation, i.e. a random variable x = (xi, ...,xn), de- 
fined by x = y — 9 is introduced. For translational (or shift) 
invariant families of distributions, p(y\9) — p (y — 9) = 
p(x). The particular form of the FI that is chosen is the 
trace of the FI matrix for independent and identically dis- 
tributed (iid, hereafter) data 0. This is referred to as the 
Fisher channel capacity (FCC) [2]. The FCC is: I FCC = 

Jdyp(y\9)(^^l) 2 = Jdxp(x)(^l) 2 un- 
der translational invariance [2,6]. The probability am- 
plitude (wave function) relates to the pdf as ip (x) = 
y/p (x). The FCC acquires the compact form I FCC = 

^tjdx n (^) 2 = 4fdx(^l) 2 . The form of 

the FCC is essential to the formulation of a variational prin- 
ciple. Within the framework of a measurement-response 
model, this implies that the observer who initiates the mea- 
surements, collects the response in the form of iid data. In 
many practical scenarios, the response of a system to mea- 
surements is not obliged to be iid. The presence of corre- 
lations contribute to off-diagonal elements in the FI matrix 
formed by the observer. These correlations may be miti- 
gated, thereby eliminating the off-diagonal elements of the 
FI matrix, by performing ICA (or an equivalent procedure) 
as a pre-processing stage. 

Consider a Lagrangian of the form 

L^ = 4fdx(^) 2 + 

+ I dxJ2 x i®i ( x ) ^ 0) - A e / dxtf: 2 (x), (2) 
J i=i 
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M < N (incomplete constraints), where the Lagrange mul- 
tiplier (LM) A Q corresponds to the probability density func- 
tion (pdf, hereafter) normalization condition J dxip 2 (x) — 
1. The LM's Aj;i = 1, ...,M correspond to actual 
(physical) constraints of the form j dx&i (x) ip 2 (x) — 
(0i (x)) = di. Here, Oi (x) are operators, and, d% are 
the constraints (physical observables). This work considers 
constraints of the geometric moment type: Oi (x) — x l ;i — 
0, M. Here, (2) resembles the usual MaxEnt Lagrangian 
with the FCC replacing the Shannon entropy. In (2), the 
FCC is ascribed the role akin to the kinetic energy. The 
constraint terms manifest the potential energy. Variational 
extremization of (2) yields the minimum Fisher information 



3 The FI matrix for iid data has vanishing off-diagonal elements (e.g., 
Appendix B in [2]) 



where H FI is an empirical Hamiltonian operator. Here, (3) 
is referred to as a TIS-1E. Note that the probability ampli- 
tudes are taken as being real quantities. This assumption is 
tenable since the model is spatially one dimensional in the 
continuum, and is time independent. Comparing the TIS-1E 
with the TISE immediately reveals that the constraint terms 

M M _ 

V (x) = 2 ( x ) — constitute an empirical 

i=l i=l 

pseudo-potential. The normalization LM and the total en- 
ergy eigenvalue relate as A D = 4E. Further, the constants 
in the TISE relate as h 2 /2m = 1. 

Solution of the TISE as an eigenvalue problem yields a 
number of energy states characterized by distinct values of 
E. These comprise the equilibrium state {zero-energy state) 
characterized by a Maxwellian distribution, and, higher en- 
ergy excited states (non-equilibrium states). The wave func- 
tions are a superposition of Hermite-Gauss solutions. By 
virtue of its similarity to the TISE, the TIS-IE "inherits" 
these energy states within an information theoretic context. 
This feature permits the projection of covert information 
into multiple energy states of the TIS-IE, for an empirical 
pseudo-potential that approximates a TISE physical poten- 
tial. 

Employing the TIS-IE to infer pdf s from incom- 
plete constraints, requires an accurate evaluation of the 
LM's. This is accomplished in this paper through a semi- 
supervised learning paradigm, that iteratively couples the 
solution of (3) with the minimization of a Lagrangian that 
manifests a measurement-response model. 

This procedure represents, in certain aspects, an exten- 
sion of the optimization procedure employed to achieve 
quantum clustering using the TISE [8]. In the case of 
quantum clustering, the TISE probability amplitude/wave 
function is approximated by a non-parametric estimator 
(Parzen windows), and, the potential V{x) is determined 
via a steepest descent in Hilbert space. In contrast, the semi- 
supervised paradigm presented in this paper achieves recon- 
struction of pdf's (the inverse problem of statistics) without 
any a-priori strictures placed on the probability amplitudes 
of (3). The Fisher-Schrodinger model has been employed 
within a statistical setting in a number of studies ranging 
from quantum statistics to fuzzy clustering [9]. Within the 
context of securing covert information, the above features 
endow the statistical enryption/decryption strategy with a 
fundamental physical connotation. 



1.2 The Dirac notation 

This paper utilizes the Dirac bra-ket notation [10] to de- 
scribe linear algebraic operations in a compact form. By 
definition, a ket |») denotes a column vector, and, a bra 
(• | denotes a row vector. The scalar inner product and the 
projection operators are described by (•!•), and the outer 
product |») (»|, respectively. The expectation evaluated at 
the e th energy state is (») £ . 

2 Semi-supervised Learning Paradigm 

2.1 Theory 

The task of density estimation involves the iterative de- 
termination of the LM's and probability amplitudes of the 
TIS-1E (3). In the MaxEnt and MFI theories, the observer 
is external to the system. The present work reconstructs 
the host pdfs using a semi-supervised learning paradigm, 
by incorporating a participatory observer. This is accom- 
plished by positioning the participatory observer in a mea- 
surement space characterized by the amplitude ip £ (x), per- 
forming unbiased measurements [2, 1 1] on a given physical 
system (data). 

The system space, inhabited by the physical system sub- 
ject to measurements, is characterized by an amplitude 
(f) e {x). Here, x and x are the conjugate basis coordinates 
of the measurement space and system space, respectively. 
Herein, the mutually conjugate spaces are taken to be the 
Cartesian coordinate and the linear momentum. Setting 
x = p,, the commutation relation is [x,p] = ih, respectively 
[1], The group for the basis change is G = —ih^- The 
corresponding Hermitian unitary operator is U = e~ mh ~zz, 
where a is the group parameter of infinitesimal transforma- 
tions. Within the present scenario, Uip £ [x] — (p £ [p]. On 
the basis of the above discussions, it is easily proven that 

lf OC W =4J = £<M 2 > £ = ±{€) e = 

lf cc [p\ ; ^ /2 m = 1. In the non-relativistic limit, the ki- 

2 

netic energy of a particle is T = ^ [1]. For TIS-1E poly- 

M 

nomial pseudo-potentials of the form V (x) — E Af x\ the 

i=i 

quantum mechanical virial theorem [9, 12, 13] yields 

I™ =2(^) £ =2E^ (4) 

The unitary relation between the amplitudes in conju- 
gate spaces results in the potential energy term in (2), 
J £ [x], being manifested as an empirical representation of 
the FCC. Specifically, lf cc [x] = J e [x] . Each measure- 
ment (or set of measurements) initiated by the observer 



at a specific juncture, perturbs the amplitude of the sys- 
tem space as Sip 6 (p,). For mutually conjugate spaces re- 
lated by a unitary transform, this results in a perturbation 
5tp E (x) — Sip E (fi) of the measurement space. It is at this 
juncture that the observer constructs the FCC for iid data. 
Consequently, 8lf cc [x] = 5J e [x] [2]. Such models are 
known as measurement-response models [14]. 

Incorporation of a participatory observer results in a 
zero-sum game [15] of information acquisition played be- 
tween the observer and the system under observation. The 
observer seeks to maximize her/his information about the 
system. Simultaneously, the system space is inhabited by 
a demon, remniscent to the Maxwell demon, who seeks to 
minimize this information transfer. This zero-sum game be- 
tween the observer and the demon is hereafter referred to as 
the Fisher game. 

Game theoretic studies in MaxEnt and MFI follow the 
traditional pattern of having the arbiter, who assigns strate- 
gies to the players, residing external to the system. In this 
paper, the probe measurements initiated by the observer 
constitute the arbiter, and, the probability amplitudes man- 
ifest the strategies. A future publication treats the game 
theoretic aspects of the semi-supervised learning paradigm, 
within the ambit of the bounded rationality theory [16]. 

The incomplete constraints d\ , i = 1 , . . . , M are evalu- 
ated as the moments of the Cartesian coordinates at each 
energy state e, by solving the TISE (1) as an eigenvalue 
problem on a lattice, for an a-priori specified physical po- 
tential. The incomplete constraints represent the only man- 
ifestation of the target values of the amplitudes/pdf's, made 
available to the designer at the commencement of the infer- 
ence procedure. 

The host pdf inference is solved by an iterative optimiza- 
tion process In this paper, the host pdf is independently in- 
ferred for each energy level e. The optimization process 
couples the solution of the TIS-1E (3), with the steepest de- 
scent minimization of an empirical quantity known as the 
residue. The residue represents the discrepancy between 
the value of J e [x] in (2) evaluated at an intermediate itera- 
tion level I for a specific energy state, and, the value of the 
exact (target) FCC expressed at the same iteration level I. 

In (4), the LM's Af are target values of the optimization 
process, which are unknown at the commencement of the 
inference procedure. Here, (4) is made consistent with the 
iteration process by specifying the relation between the tar- 
get values of the LM's, and, the LM's at some intermediate 
iteration level I as 

M M 

2 E *Af <* E Ki W I #) £ ( 5 ) 

i=l i=l 

Here, (5) is critical to the optimization process since it 
infuses a representation of the target response state into the 
iterative procedure. The final values of the expectation of 



the amplitudes satisfy (ipf =final Vf =/ma z/ £ = L Note 
that the expectation (ipf \ ipf) e is not assumed to be unity. 
Combining (4) and (5) allows the target value of the FCC to 
be manifested at some intermediate iteration level I. At the 
I th iteration level, the term J e [x] in (2) is 

J (Ki) = x h (Vf I Vf > e - E Ki I e (*) IVf) £ 

V 7 2—1 

(6) 

The residue at the iteration level, re-scaled with re- 
spect to (ipf | ) is 



Re X 



A I 



= -K,i + E a?,, 



i=l ' I (Wi 
Here, (7) is 4 (AfJ S /f c < 



(7) 



9 e {^oi^Xi^j ;i = 1,...,M, where the re-scaled target 
FCC and the potential energy are lf cc ^A| ; ,df^ , and, 
3 e (Xg t i,Xf t ^j, respectively. A steepest descent procedure 



-gp - along the gradient of the LM's yields "opti- 
mal" values of the LM's 



dXh 



0;i = 1, M 
(8) 

The optimization procedure is carried out till the target val- 
ues are achieved. The steepest descent procedure requires 

the analytical values of — ^r 1 ^ , 



and thus, 



1, ...,M. Left multiplying (3) for the energy state e and 
iteration level I by ?/f and integrating, yields 



9K 



ox- 



1, M. The theory of the semi-supervised 



learning paradigm based on the Fisher game is summarized 
by the pseudo-code in Algorithm 1 . 

2.2 Physical interpretations 

The Fisher game constitutes a self-consistent informa- 
tion theoretic optimization procedure, with a quantum me- 
chanical connotation. The above theory contains three inter- 
esting observations. First, the commencement of each itera- 
tion loop corresponds to the juncture at which the observer 
initiates measurements. Next, as the iterative process ad- 
vances, the FCC approaches a minimum. This corresponds 
to an increase in the uncertainty at the location of the ob- 
server. 

Finally, at the termination of the I th iteration loop, the 
condition (8) that yields the "optimal" LM's is the state- 
ment of a contract between the demon and the observer, 



whereby, the demon makes the last move in the iterative 
Fisher game. This implies that the participatory observer 
acquires a state of maximum uncertainty (minimum Fisher 
information). Such a contract is the underlying basis for de- 
termining the "optimal" LM's, corresponding to amplitudes 
that decrease the FCC at the termination of each iteration 
level. 

Scenarios of such type cannot be modeled within the 
framework of traditional game theory [17], thus, justify- 
ing the use of the bounded rationality theory to study the 
game theoretic aspects of the Fisher game. A future publi- 
cation studies the information landscape and its relation to 
the Fisher game. 

Algorithm 1 Inverse Problem of Statistics 

PROCEDURE FOR EACH ENERGY STATE e 
INITIALIZATION 

1. Solve TISE (1) for known physical potential V(x) as 
an eigenvalue problem in the event space [a, b\. Obtain 
incomplete constraints d\ ; i = 1, M. 

2. Solve TIS-1E (3) for arbitrary Lagrange multipliers 
Xiarbitraryl * = 1, Af. Obtain amplitudes i>l l=1 . 

3. Input tolerance parameter 5f, i = 1, M 
ALGORITHM FOR I th > 1 ITERATION LOOP 

1. Obtain ipf by solving the TIS-1E (3) as an eigenvalue 
problem, using the optimized LM's A? ; _ 1 obtained from 
the (I — l) th iteration loop. 

2. Minimize the re-scaled residue R £ (xf ^j (7), to obtain 
optimized LM's that correspond to ipf 

A i,l * d\~l t 

3. Solve TIS-1E (3) as an eigenvalue problem with LM's 



Af j. Obtain moments d\ t 
IF 



1,..,M. 



1 = 1 + 1 

RETURN 
ELSE IF 

END IF 



> S l ;i = 1,...,M 



2.3 Numerical results 

The asymmetric harmonic oscillator (AHO) potential 
V (x) = x + =y is chosen as TISE physical potential. 
The TISE with the AHO potential is solved as an eigen- 
value problem for 201 data points within the event space 
[a = — 1, b = 1] for different energy states. Boundary con- 
ditions on the amplitudes, ip £ (a) = ip £ (b) = 0, are en- 
forced. An empirical pseudo-potential of the form V £ (x) = 
X\x + A|, that approximates the TISE AHO physical poten- 



tial is specified. Here, Af = -4-, In this case, M = 2, N = 
201. 

The values of the incomplete constraints are c^ -0 ' 1 = 
(-0.0344, 0.0097,), and, d e 2 =0A = (0.1302,0.2809). The 
final values of the LM's are AT ' 1 = (1.0892, 1.1121), 



and, A^ ' 1 

total energy eigenvalues are E?~ { ' 



(0.6635, 0.7175) , respectively. The inferred 
(2.5333, 10.0769) . 
The corresponding TISE total energy eigenvalues are 
Kxacl = (2-5152, 10.0147) . Fig. 1 depicts the in- 
ferred pdf's overlaid upon the TISE solution. Here, the 
Maxwellian distribution corresponds to e = 0, and, dou- 
ble peaked pdf corresponds to the first excited state e = 1, 
Note that the inferred pdfs almost exactly coincide with the 
TISE solutions. 
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Figure 1. Inferred TIS-IE pdf (dash-dots) and 
exact TISE pdf (solid lines) 



3 Projection Strategy 

Consider M constraints d\, d £ M . In a discrete 
setting, these are expectation values of a random variable 
Xi n ;n = 1, ...,7V : 



df = ^2p £ n x lin ;i = 1, ...,M. 



(9) 



n=l 

The pdf \p £ ) € di N is a ket, where \n);n — l,...,N 
is the standard basis in $l N , is expressed as \p £ ) = 

N N 

\ n ) ( n I P £ ) — E Pn \ n )- The ket of observable's is 

n— 1 n— 1 

expressed as \d £ ) £ 5i A/+1 with components d\ , d £ M , 1, 
and, an operator A : "3i N — > "3i M+1 given by A = 

N 

J2 \x n ) (n\ . Defining vectors \x n ) e K M+1 ;n= l,...,iV 



as the expansion \x r , 



M+l 

E K) (* I av. 

i=l 



M+l 

1=1 



where i is a basis vector in 5ft M+1 , (9) acquires the com- 
pact form 

|d £ ) =A|p e );A:5R w ^5R M+1 . (10) 

The physical significance of the constraint operator A 
in (10) is as follows. Inference of the pdf and the TIS- 
IE pseudo-potential in (3) from physical observables is 

M 

achieved by specifying V (x) — XiX 1 . In a discrete set- 

i=l 

ting, x l n — > a;j in ; i = 1, M; n = 1, AT. The cc^ con- 
stitute the elements of the M rows and N columns of the 
operator A, and represent the spatial elements of the TIS- 
IE pseudo-potential in matrix form. The unity element in 
\d £ ) 6 5R M+1 enforces the normalization constraint of the 
probability density \p £ ). 

The operator A is independent of the host pdf and thus, 
the energy state. This may be mitigated by defining 



A £ = A + k £ \d £ ) (7| 



(11) 



Here, (I\ is a 1 X N bra, and, k £ ^ — 1 is a constant param- 
eter introduced to adjust the condition number of A £ , and 
hence its sensitivity to perturbations. In (11), dependence 
upon the host pdf is "injected" into the operator A £ by the 
incorporation of \d £ ). Specifically, each element of the ket 

N 

| d £ ) is defined by p^x^i — 1, ...,M . 

n=l 

Thus, (10) becomes A £ \p £ ) = \d £ ) + (k £ \d £ ) (I\) £ . Ex- 
panding (k \d £ ) (I\) e = k \d £ ) (I\ p £ ), and evoking the pdf 
normalization, (I\ p £ ) = 1, yields 

d £ ^ = (k £ + 1) \d £ ) = A £ \p £ ) ■ A £ : Vi N -» SR M+1 . 

(12) 

The operator A £ is ill-conditioned and rectangular. Thus, 
(12) becomes: 



\ P e ) = {A £ ) 1 d ( 



P 



(13) 



where, I A 
in range 



is the pseudo-inverse [18] of A £ , and lies 

All necessary data dependent information 

-l 



resides in A 



The null space term in (13) is of particular importance 
since the code is embedded into it via unitary projections. 

Here, p £ \ S null (^A £ ^J is explicitly data independent. 
However, it is critically dependent on the solution method- 
ology employed to solve (13). The operator G £ = A e1f A £ 
is introduced. Here, A £ ^ is the conjugate transpose of A £ . 
Projection of the covert information into null (G £ ) instead 

of null (y^ e ^j > leads to increased instability of the eigen- 
structure, which is exploited to increase the security of the 
covert information [3, 9]. 



Given the operator A £ and the probability vector \p e ), 
whose inference is described in Section 2, the normalized 
eigenvectors corresponding to the eigenvalues in the null 
space of G £ having value zero (zero eigenvalues) are de- 
fined as \n £ n ) ; n = 1, N - (M + 1). Here, \r) e n ), defined 
as the basis of null (G £ ), are evaluated using SVD [18]. To 
introduce cryptographic keys (cryptographic primitives), an 
operator G £ is formed by perturbing select elements of G £ 
by SGf j. Here, SGf ■ is a perturbation to the element in- 
habiting the i th row and j th column of the operator G e . 
In symmetric cryptography, only a single element of G e 
is perturbed. The security of the code may be ensured by 
adopting an asymmetric cryptographic strategy. Here, more 
than one element of G 6 is perturbed. 

The extreme sensitivity to perturbations of G £ causes the 
eigenstructure of G £ = G £ + SG £ j to substantially dif- 
fer from that of G £ , even for infinitesimal perturbations. 
The values of ;n = 1, ...,N - (M + 1), the basis 
of null(G £ ), are evaluated using SVD. The unitary oper- 
ators of decryption C/f ec (without perturbations) and C/f ec 
(with perturbations), U £ dec , U £ ec : $t N -» $ N -( M + 1 ) 7 
and, the corresponding encryption operators U £ 

SjjJV-(M+l) _^ sftJV foj . the energy sme £ ^ 



N-M-1 

U s dec = E \n)(rf n \; 

n=l 
JV-M-1 

^ec = E l«X^|, 
n=l 

and, 

N-M-1 

- 77 e t - 



U £ 
enci w enc 



(14) 



^c = ^e T c= E K)H 
n=l 
JV-M-1 

~ £t - E IOH 

n=l 



respectively. 



3.1 Encryption 

Given a code |<f ) e srN-(m+i) tQ be encrypte( j i n me 
energy state e , the N — (M + 1) components are given 
by (n | <f) = q £ n ;n = 1,...,N- (M + 1). The pd/ of the 
embedded code is: 

JV-M-1 

|Pc) = ^encl9 £ )= E IC>H<f>. d5) 
n=l 

The total pdf comprising the host pdf and the pdf of the 
code is 

\f) - ¥) + \Pl) ■ (16) 
Note that since \p £ ) e null , i e = . 



3.2 Transmission 

Information may be transferred from the encrypter to the 
decrypter in two separate manners , via a public channel. 
The first mode is to transmit the constraint operators A £ 
and the total pdf s \p £ ). An alternate mode is to transmit 
the LM's obtained on solving the Fisher game(Section 2), 
and, the total pdf s \p £ ). Owing to the large dimensions of 
the constraint operators A £ , the latter transmission strategy 
is more attractive. 

The values of parameters k £ for each energy state, and, 
the cryptography key/keys are transmitted through a se- 
cure/covert channel. The cryptographic primitives are la- 
beled in order to identify the elements of the operator G £ 
that are perturbed. In the case of asymmetric cryptography, 
some of the keys may be declared public, while keeping 
the remainder private [4]. Asymmetric cryptography pro- 
vides greatly enhanced security to the covert information, 
and, provides protection against attacks, such as plaintext 
attacks [3,4, 9]. 

3.3 Decryption 

The decrypter and encrypter have an a-priori "agree- 
ment" concerning the nature of TIS-1E pseudo-potential, 
and, the number of energy states. The legitimate receiver 
recovers the key/keys SG £ j and the parameter k £ from the 
covert channel. The operators A £ , G £ , and, G £ are 
constructed. The host pdf may be recovered in two dis- 
tinct manners, depending upon the transmission strategy 
employed. Note that both methods to reconstruct the host 
pdf require the total pdf p £ to be provided by the encrypter. 
First, the scaled incomplete constraints, defined in (12), are 



Here, i is a 



obtained by solving (i\ A £ \p £ ) 

basis vector in 3? M+1 . This procedure is possible because 
\p%) € null Thus, A £ \p%) = . The host pdf are 

then computed for each energy state by solving the Fisher 
game, using the re-scaled set of incomplete constraints. Al- 
ternatively, the host pdf may be obtained by solving the 
TIS-1E (3) as an eigenvalue problem, given the values of 
the LM's X £ ;i = 1, M, and, the event space (Section 
2). Both methods allow the reconstructed host pdfs to be 
obtained with a high degree of precision. The code pdf is 
recovered using 



\p S r 



(17) 



The encrypted code is recovered by the operation 

JV-M-1 

\<fr) = ULMc)= E N^nlPrc) («) 

71=1 



The thresholds for the cryptographic keys is accom- 
plished by the designer, who performs a simultaneous en- 
cryption/decryption without effecting perturbations to the 
operator G £ . The host pdf s are inferred from the Fisher 
game. The code \q £ ) having dimension N — (M + 1) is 
formed. The designer implements (15)-(18) for each en- 
ergy state e. The threshold for the cryptographic key/keys 
is 8 £ = \\\q £ ) — \q £ )\\- Hardware independence is demon- 
strated by performing the encryption on an IBM RS-6000 
workstation cluster, and, decryption on an IBM Thinkpad 
running MATLAB v 7.01. The encryption/decryption strat- 
egy is critically dependent upon the exact compatibility of 
the routines to calculate the basis \fj^) and the eigenvalue 
solvers, available to the encrypter and decrypter. 

4 Numerical Examples 

The encryption/decryption strategy is tested using the 
energy state dependent model vis-a-vis an energy state in- 
dependent model [9], for the case of asymmetric cryptog- 
raphy. These are characterized by the constraint operators 
A £ (described in (11) and (12)) for fc^ ' 1 = -0.1, and, 
A (described in (10)), respectively. The energy state inde- 
pendent model corresponds to the ground state Maxwellian 
distribution. 

A random number generator generates code in [0,1]. 
Two identical kets of the code having dimension N — (M + 
1) = 198 are created for projection into the null spaces of 
the energy state dependent operators G £=0,1 , respectively. 
This "emulates" the selective projection of a code compris- 
ing of a single ket of dimension 396, into the two energy 
state of null(G £ . For the energy state independent oper- 
ator null(G), only a single ket is projected. The crypto- 
graphic primitives are SG1.3 = $Gl~ 3 ' = 3.0e — 013 

and <5G 2 , 7 = SG^ ' 1 = 7.0e - 013, respectively. All 
numerical examples in have a threshold for perturbations 
S £ <~ 2.0e — 014. The condition numbers, cond(u) of the 
constraint operators A and A £ provides a measure of the 
sensitivity to perturbations of the operators G = A^A and 
G £ . 

Values of cond(A), cond(A £=a ), and, cond(A £=1 ) are 
3.73048, 3.41742, and, 3.37888 , respectively. Going 
by conventional logic, the energy state independent model 
should afford greater security to the covert information, ow- 
ing to the greater value of cond(A), vis-a-vis cond(A £=0 ' 1 ). 
Numerical simulations reveal a dichotomy in this regard. 

A more relevant metric of the extreme sensitivity of 
null(G £ ) to perturbations, induced by the cryptographic 
keys SG £ j, is the distortion of the code pdf \p^ unpe rt)- 
Here, \p £ c ^ unpert ) is evaluated from (15), using r\ £ n (the un- 
perturbed basis of null (G £ )). The distorted code pdf is 
\Pl), which is calculated from (15) using ff n (the perturbed 



basis of null [G e p, as described in Section 3.1. 

For the energy state dependent model, the RMS error 
of encryptionis defined as: RMSf„. — ll err eT icll 

Here, |||err| nc )|| = || (\p £ ) - \p £ CtUnpert )) || , and, 
length (\err £ nc )) is the dimension of (\p £ c ) - \p £ c . unpert ))- 
A further quantitative metric of the degree of se- 
curity of the encrypted code is the RMS error of 
reconstruction between the embedded code and the 
code reconstructed without the keys. For the en- 
ergy state dependent model, this is: RMS £ econ = 

II \ er Kecon) W/ length (\err £ econ )y II K 7- ™) II 
\\\q) — \q r i}\\ ■ Here, RMS £ econ provides a measure 
of the error of recovery of the code by an unauthorized 
eavesdropper who does not possess the keys SG £ j, but, 
possesses the total pdf and the code pdf. Such attackers 
are known as semi-honest adversaries, since no attempt is 
made to distort the information transmitted via the public 
channel. In this case, the reconstructed code becomes 

N-M-l 

\Qrl)= E I") (Vn I Pre) • 
n=l 

For the energy state independent model, the values of 
RMS enc = 0.79869 and RMS recon = 0.81302. The 
corresponding values for the energy state dependent model 
are RMS £ =^ = (0.83878,0.89651), and, RMS £ = c o 'n = 
0.84596, 0.88931, respectively. The higher values of the 
RMS £ nc for the energy state dependent model explains the 
vastly enhanced degree of security it provides by demon- 
strating a greater value of RM S £ econ , despite the value of 
cond(A £ ) being less than cond(A). Simulations results for 
select values for the case of the energy state independent 
and dependent models are described in Table 1 and Table 
2, respectively. The reconstructed code with the keys is ex- 
actly similar to the original code. On the other hand, the 
code reconstructed without the keys bears no resemblance 
to the original code. The highly oscillatory nature of the to- 
tal pdf (16) for the energy state dependent model depicted 
in Fig. 2, demonstrates the extreme instability of the statis- 
tical coding process. 

5 Ongoing Work 

The Fisher game has been extended to multi- 
dimensional and temporal cases. The model presented 
herein is in the process of being amalgamated with existing 
quantum key distribution protocols [19], to yield a hybrid 
statistical/quantum mechanical cryptosystem. Such a hy- 
brid cryptosystem mitigates the current limitations of quan- 
tum channels to transmit large amounts of data. A covert 
quantum key distribution protocol may be utilized for the 
secure delivery of the cryptographic primitives (the SG £ j). 
Finally, the statistical encryption/decryption strategy has 



been modified to perform privacy protection in statistical 
databases. These results will be published elsewhere. 

Table 1 . Energy State Independent Model 



ki) 



Vlr 



\qn) 



0.23813682639005 
0.69913526160795 
0.27379424177629 
0.90226539453884 



-0.00668168344388 
0.20008072567388 
-0.14186802540956 
0.36853370671177 




-1 -0.8 -0.6 -0.4 -0.2 0.2 0.4 0.6 0.8 1 



Table 2. Energy State Dependent Model 



Figure 2. "Chaotic" Nature of the Total Pdf, 
Eq. (16) 



\<r 



\<lr 



\1rl) 



e = Zero-energy/ 'ground state 

0.23813682639005 

0.69913526160795 

0.27379424177629 

0.90226539453884 

e = 1 First excited state 

0.23813682639005 

0.69913526160795 

0.27379424177629 

0.90226539453884 



-0.26776249759842 
0.77862610842042 
-1.16636783859136 
0.02881517541356 



1.25161826270042 
-3.2554101 14151938e-005 
-0.11041660156776 
0.61665920565232 
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